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(57) Abstract: A system and method for restoring a microprocessor-based system to a previously booted target state in which an 
image of memory and the processor registers in the previously booted state is saved and stored in a storage device. A restore routine 
executing in ROM retrieves the image from the storage device and restores the system memory and processor registers to the target 
state. An operating system return routine then returns control of the system to the operating system software. In an exemplary 
implementation, a system in accordance with the invention is incorporated into a microprocessor-based external programmer for a 
cardiac rhythm management device in order to allow quick starting of the programmer from a powered down condition without gomg 
through a time consuming boot process. 



wo 01/50248 



PCT/USOO/35531 



QUICK STARTING MICROPROCESSOR-BASED SYSTEM 

Field of the Invention 

This invention relates to systems and methods for operating computers 
and other types of microprocessor-based systems. In particular, the invention 
relates to a system and method for quickly starting up a microprocessor-based 
5 system such as an external programmer used gather data from and program a 
cardiac rhythm management device. 
Background 

In order for a computer or other microprocessor-based system to be in an 
operational state capable of executing multiple application programs (i.e., those 

10 programs that give the system specific functionality), the system must be under 
the supervisory control of operating system (OS) software. This operational 
state involves particular code and data being stored in memory that enable the 
OS to maintain supervisory control over how the system resources are allocated 
to the various application processes. The usual means by which the operational 

1 5 state is attained is through a boot sequence, in which the processor (CPU) first 
begins executing (e.g., upon powering up from a powered down condition) at a 
specific location in a non-volatile read-only memory (ROM). That is, the 
program counter of the CPU (or instruction pointer in Intel x86 architectures) is 
initially loaded with the starting address of software in the ROM, usually 

20 referred to as the BIOS (basic input/output system) because of other functions 
performed by the software. The BIOS code contained in the ROM defines the 
basic steps taken by the system when it starts, including hardware detection and 
initialization and loading of the operating system by a bootstrap loader. 
Execution of the bootstrap loader causes the boot record of the storage medium 

25 containing the operating system software (e.g., a hard disk, floppy, or CD-ROM) 
to be read into system memory, which is usually volatile dynamic random access 
memory (DRAM). The boot record contains a boot program which is then 
executed to begin the process of loading the operating system into memory from 
the storage medium. 
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The process of booting the system is time-consuming because the 
operating system must perform certain computations in order to configure itself 
to the particular system, including hardware detection/initialization and the 
building of various data structures to be used in the management of system 
5 resources such as memory and processor time. In certain situations, it would be 
advantageous for a system to be able to transition quickly to a booted operational 
state without going through a lengthy boot process. It is toward that general 
objective that the present invention is primarily directed. 
Summary of the Invention 
10 The present invention is a system and method for enabling a computer or 

other microprocessor-based system to transition to a target state without going 
through a boot process. The target state is a booted operational state in which 
the operating system is in control of system resources, and application programs 
are either loaded in memory or available for loading from a storage medium by 
15 the operating system. In accordance with the invention, an image of the target 
state is captured and saved in a nonvolatile image storage medium. The image 
of the target state includes the contents of volatile DRAM memory and the 
values stored in processor registers when the system is in the target state. In one 
embodiment, a restore routine contained in a nonvolatile memory is executed 
20 upon power-up of the system. The restore routine then extracts the target state 
image from the image storage medium and begins the process of restoring the 
target state. After the system memory and registers are loaded with values 
corresponding to the target state, processor execution is transferred to an 
operating system return routine that returns control of the system to the operating 
25 system software. 

In accordance with the invention, the target state image contained in the 
image storage medium includes a memory image and a target state data structure. 
The target state data structure contains values to be stored in the processor's 
registers and information enabling the restore routine to properly store the 
30 memory image into system memory. In one embodiment the memory image is 
formed by directly copying contents of the system volatile memory. The copied 
contents are then stored in the image storage medium, with or without data 
compression. The memory image can then be copied directly from the image 
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storage medium into appro])riate memory locations by the restore routine. In 
another embodiment, the target state image is generated by an image saving 
routine that uses the paging scheme implemented by the operating system to 
create a memory image made up of page frames, i.e., corresponding only to 
5 memory locations actually used by the system in the target state. Information 
from the page tables maintained by the operating system are then copied to the 
target state data stmcture for enabling restoration of the page frames in memory 
by the restore routine. 
Rrief Description of the Drawings 

10 Fig. 1 is a system diagram of a microprocessor-based system suitable for 

incorporating a system in accordance with the invention. 

Fig. 2 is a block diagram of the software components for a particular 
implementation of the invention. 
Detailed Description of the Invention 

15 The present invention may be embodied as a system for transitioning a 

microprocessor-based system to a target state booted with operating system 
software. The system employs a restore routine to restore the system's volatile 
memory and processor registers to correspond to the target state. An image 
storage medium contains an image of the target state made up of a memory 

20 image and a target state data structure. The image storage medium is a 
nonvolatile memory or storage device such as an electrically erasable 
programmable read-only memory (EEPROM, a.k.a. flash ROM), a hard disk, 
floppy disk, ferro-electric memory, battery-backed RAM, or an optical storage 
medium. The restore routine is contained in a non-volatile memory such as a 

25 flash ROM or battery-backed RAM, but may relocate itself during execution to 
an area of volatile memory known to be unused in the target state. The restore 
routine would typically be contained in the same medium as the system BIOS 
and execute in lieu of the BIOS's boot program. The image storage medium 
may be a flash ROM or other non-volatile medium with sufficient storage 

30 capacity such as a hard disk. The restore routine includes code for retrieving the 
memory image and the target state data structure from the image storage 
medium. After restoration of volatile memory and processor registers to 
correspond to the target state, processor execution is transferred to an operating 
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system return routine by loading the processor's instruction pointer with the 
routine's address. The operating system return routine then returns control of the 
system to the operating system software after making any further needed 
adjustments. 

5 A target state image saving routine executed by the operating system may 

be used to generate and save the target state image. In one embodiment, a copy 
of the contents of all of volatile memory in the target state is stored as part of the 
target state image. In order to reduce to size of the target state image, data 
compression techniques can be applied to the memory contents before storing. 

10 In another embodiment of the invention, rather than storing the entire contents of 
volatile memory, only the contents of locations in volatile memory that are 
actually in use by the system in the target state are saved as a memory image. 
The size of the memory image that must be stored in order to restore the target 
state is thus decreased. (Further decreases can be obtained by using data 

15 compression techniques to compress the memory image.) In order to accomplish 
this, the image saving routing uses the paging scheme of the operating system in 
order to identify used memory locations in a target state. Paging is a technique 
in which the operating system allocates units of memory called pages in a linear 
address space and maps those pages to page frames in physical address space 

20 (i.e., to physical locations in memory). The linear address space may be larger 
than the physical address space with unmapped pages kept on a storage medium 
such as a hard disk and copied into memory as needed, thus providing one way 
of implementing a virtual memory. Page tables maintained by the operating 
system and the paging mechanism of the processor provide the page to page 

25 frame mapping function. The memory image corresponds to pages in linear 

address space that are mapped into page frames of physical address space by the 
paging scheme of the operating system in the target state. It thus represents only 
the contents of those memory locations that are actually in use in the target state. 
The target state data structure contains information derived from the operating 

30 system's page tables that relates the stored memory image to physical addresses. 
The restore routine retrieves the target state data structure from a known location 
in the image storage medium. Code in the restore routine then copies the 
memory image to volatile memory in a manner that restores the page frames of 
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the target state. The target state data structure also contains the contents of the 
processor's registers in the target state so that the registers can be reloaded with 
the values by the restore routine. 

As aforesaid, a target state image saving routine is executed in order to 
5 take a snapshot of the target state. A target state process may first be executed in 
order to move the system to the desired target state before the image saving 
routine is called. In order to isolate the system resources and allow unlimited 
access to memory while an image of the system is captured, the image saving 
routine is implemented as an interrupt servicing routine which executes at the 

10 kernel privilege level and with interrupts disabled. So that no changes will be 
made to the hard disk files during the image capturing process, the disk file 
system is unmounted by the image saving routine. After the image is saved in 
the image storage medium, execution jumps to the operating system return 
routine which remounts the file system, re-enables interrupts, and executes an 

15 interrupt return to the target state process in order to rehnquish control back to 
the operafing system. This is the same operating system return routine jumped 
to by the restore routine in the final stages of restoring the target state. The 
operating system return routine is thus contained in the page frames of the target 
state. 

20 In capturing the target state image, the image saving routine scans the 

presently used paging directory and paging tables and generates a copy of the 
page directory filled with linear addresses of paging tables. This structure 
enables translation of linear addresses to physical addresses. The image saving 
routine further generates a list of physical addresses of page frames stored in 

25 volatile memory locations from the contents of page tables. A list of linear 

addresses of pages that are mapped to page frames in memory in the target state 
is also created to enable translation of physical addresses to linear addresses by 
indexing into the list with a physical address. The target state image saving 
routine uses the list of linear addresses of mapped pages and the list of physical 

30 addresses of page fi-ames to create the memory image for storing in the image 
storage medium. 

In the case where the image storage medium is flash ROM, the image 
saving routine must use the paging scheme to access it. Accordingly, code is 
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provided in the target state image saving routine for: (a) obtaining a physical 
address of the image storage medium from a hardware configuration file, (b) 
patching a blank entry of the page directory with the physical address of a page 
table created to contain the physical addresses of the image storage medium, (c) 
5 accessing the storage device with a linear address corresponding to the patched 
entry in the page directory and the page table pointed to thereby, and (d) storing 
the memory image and target state data structure in the image storage medium. 
If the image storage medium is a hard disk, on the other hand, the file system is 
unmounted and interrupts disabled during the image capture process for the 
10 reasons stated above. Therefore, code is provided in the target state image 

saving routine for: (a) accessing the hard disk without interrupts, (b) interpreting 
a partition table of the hard disk to find a designated storage file and calculate a 
linear block address thereof, and (c) storing the target state data structure and 
memory image in the designated storage file. 
15 Since there is no operating system present before the target state is 

reached, the retrieval and storing of the memory image by the restore routine is 
performed using physical addresses with paging switched off. The target state 
data structure includes a list of physical addresses that corresponds to volatile 
memory locations in which page frames are stored in the target state. The list is 
20 then employed by the restore routine to store the memory image retrieved from 
the storage device into volatile memory at selected locations. The restore routine 
then switches on paging before transfer to the operating system return routine. 
The target state data structure contains the physical address of the page directory 
in the target state, and the restore routine then includes code for: (a) patching the 
25 page directory so that physical addresses of restore routine instructions are 

mapped to the same physical addresses, (b) saving information for unpatching 
the page directory in the target state data structure, and (c) enabling paging 
before jumping to the operating system return routine. The target state data 
structure contains the physical address corresponding to the memory location of 
30 the target state data structure in the target state, enabling the restore routine to 
write to the target state data structure. Code in the operating system return 
routine then invalidates translation lookaside buffers of the paging mechanism. 
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and unpatches the page directory with information contained in the target state 
data structure. 

The following is a description of an exemplary implementation in which 
a system in accordance with the invention is incorporated into an external 
5 programmer for a cardiac rhythm management device (e.g., a pacemaker). The 
programmer is thus provided with the capability of quick starting from a 
powered down condition without going through a lengthy boot process, thus 
saving time for the clinician and patient when the pacemaker is monitored and/or 
programmed either at the time of implant or during follow-up. The 

10 implementation as described has been shown to be capable of transitioning from 
a powered down to an operational state in less than twenty seconds, a result that 
has heretofore not been achieved by any currently available external programmer 
using a 1 6-bit or greater microprocessor. 

As illustrated in Fig. 1, the programmer in this example is a 

15 microprocessor-based system 10 that includes a Pentium processor 12, a DRAM 
memory 14, a hard disk drive 16 with integrated controller, a video adapter 18 
for driving a display, a keyboard/mouse controller 20, and a non-volatile flash 
ROM memory 35. The components connect to the system over a system bus 30 
or a PCI bus 40. Also interfaced to the system over an ISA bus is an I/O 

20 subsystem 22 that includes telemetry and EKG circuits, each with a processor, 
memory, and I/O interface circuitry. The flash ROM 20 contains the BIOS 
(basic input/output system) and a restore routine that restores the DRAM 
memory and processor registers to a target state upon powering up the unit. 
When configured to do so, the BIOS startup routine transfers control to the 

25 restore routine after completing the normal hardware detection and initialization 
tasks, rather than booting the operating system software from the hard drive. 
The target state image, which includes a memory image and a target state data 
stmcture, is stored in either the hard drive or the flash ROM and is extracted by 
the restore routine for loading into memory and the processor registers in order 

30 to move the system to the target state. The I/O subsystem 22 also has flash 
ROM memories for the EKG and telemetry circuits which may contain restore 
routines to facilitate quicker booting of those systems. The telemetry and EKG 
circuits also contain DSPs (digital signal processors) that have flash memory for 
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their boot up as well as for filtering, control and functional algorithms. Using 
flash ROM memories as target state image storage media for both the main 
system 1 0 and I/O subsystem 22 provides a quicker startup than a hard disk 
drive, as the flash memory is initialized immediately after power is established, 
5 whereas the hard drive takes 3 to 5 seconds to initialize due to the motor spin up 
time. Access times are also faster with flash ROM memory. 

In this exemplary implementation, the operating system (OS) software 
used is the QNX operating system along with the QNX Windows graphical user 
interface. QNX is a real-time OS that provides memory management and 

10 resource allocation for application programs running under it that provide 

specific functionality to the programmer (e.g., telemetry and EKG processing). 
The target state image may include only QNX, with all application processes 
being loaded from the hard drive, or may additionally include one or more 
application processes that are started immediately upon attaining the target state. 

15 Additional application processes may then loaded from the hard drive by the OS 
as they are needed in the normal manner. 

As described above, the quick starting system that is incorporated into the 
programmer is made up of three main software components as shown in Fig. 2: a 
restore routine 200, a target state image saving routine 1 00, and an operating 

20 system return routine 300. The restore routine includes all of the code and data 
structures used in restoring the system to the target state and is located in the 
BIOS address space (i.e., in the ROM or flash ROM containing the BIOS). It is 
executed in place of the BIOS's boot program after the BIOS completes its 
hardware initialization tasks. Since the hardware components are known 

25 beforehand in this implementation, initialization code in the BIOS is modified to 
store preset values in hardware registers rather than going through an algorithmic 
hardware detection and initialization procedure in order to further decrease the 
startup time. After completion of the state restoration procedure, a jump is made 
to the operating system return routine 300 in the QNX address space which, as 

30 described below, is also the endpoint of the target state image saving routine. 
The target state image saving routine 1 00 and operating system return routine 
300 are QNX processes located in the address space allocated by QNX. Another 
QNX process, the target state process 99, is run when it is desired to save a target 

8 
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State image. The target state process moves the system toward a target state, as 
defined by a configuration file and/or command fine parameters, and then calls 
the image saving routine 1 00 as an interrupt servicing routine. After the target 
state image is saved in the image storage medium, the image saving routine 
5 jumps to the operating system return routine 300 which then retums to the target 
process 99 by executing a retum from interrupt instruction. Target state process 
99 then exits and control is returned to QNX. 

The function of the restore routine 200 is to bring the system fi-om a non- 
operational (e.g., powered down) state to a target state in which the OS is loaded 

10 and applications are ready to run. Most of the time during booting of the OS is 
dedicated to loading the OS files and reading configuration files, and detecting 
hardware, which involves various timeouts and port scans. Since the hardware 
in this implementation is fixed, a snapshot can be taken of the system memory, 
CPU registers and all hardware that has been initialized by the OS at the time 

15 snapshot is taken to generate an image of the target state. Bringing the system 
later to this target state from the image makes the OS believe that it just passed 
through the complete booting process, because there is no difference between the 
booted state and restored state with respect to anything accessible to and used by 
the OS. Additional issues involved are making the OS aware of the time 

20 difference between saved image and current time, and possible file system 
changes. 

Saving the image involves accessing the lowest-level system resources, 
and this has to be done by code operating in the kemel or ring 0 privilege level. 
This is achieved by attaching the code of the saving routine 200 to an interrupt 

25 handler and then generating an interrupt, thus giving control to the saving code 
which is then guaranteed to run in ring 0. The image saving procedure is 
initiated by the OS first rurming the target state process 99 which moves the 
system toward the target state before the image saving routine 100 is executed. 
The priority of the target state process 99 is boosted, since there is nothing else 

3 0 that is of higher priority. 

Several processes are run afl:er the target state is restored. The real-time 
clock is synchronized to the hardware clock, the mouse driver is reinitialized, 
and the windows graphical user interface is restarted. In addition, at least one 
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application should be run as well, since the goal of the implementation is to start 
a functioning external programmer for a cardiac rhythm management device. 
Starting an application requires reading the file from hard disk, and this is a slow 
process. Unix operating systems such as QNX allow an application to be loaded 
5 into memory and then held in a suspended state until a signal is received to start 
the actual execution. This is the approach taken in this implementation where 
several processes are read from the hard disk before the system's image is saved, 
thus lessening the time spent in getting the applications to run after image is 
restored. Depending on the command line parameters that are input when the 

1 0 target state process 99 is executed, one or more programs are read from disk and 
loaded into memory where they are held in a suspended state. The target state 
image captured by the image saving process then contains these suspended 
processes in the process tables of the OS. The process 99 also reads system 
timer granularity by calling the QNX function qnx osinfo. The timer granularity 

1 5 value will have to be restored after the target state is restored because the BIOS 
setting of the timer is not guaranteed to be the same as QNX's. 

The file system is then unmounted by the target state process 99, because 
the application may make changes on the hard drive, and the restored target state 
will not know about these changes. Unmounting the file system guarantees that 

20 all the files are closed during the image saving procedure, and subsequent 

remounting of the file system during the target state restoration procedure will 
cause the directory of the hard disk to be reread, thus tracking all the changes 
that have happened since the time the image was saved. Additionally, the cache 
buffers will hold file data of the recently opened files. Even though the disk 

25 directory will be reread, if the system attempts to open and read the file that has 
been changed, the OS will provide the data from cache instead of reading it from 
the hard disk. Therefore, the cache buffers are invalidated. 

The target state image saving function 1 00 is attached to the non- 
maskable interrupt (NMI) as an interrupt handler. The target state process 

30 therefore generates an NMI to pass control to the image saving routine 100. The 
code is then executing in ring 0, ready to save the system image. The SaveState 
function 1 10 is then called which saves all CPU's general use registers and 
segment registers on the stack, with the data segment registers tracking the target 

10 
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state process's data segme it. Then it sets the FS register to point to that data 
segment, since it is much more convenient to have the data segment register to 
be 0-based. Segment registers DS and ES are then set with the 
QNX_FLAT_SEG value, defming a 0-based, 4GB segment. 
5 The QNX OS uses the paging mechanism of the Pentium processor, 

which means that physical addresses of memory are not easily calculated. Since 
it is an image of physical memory that is to be saved, however, extensive use 
must be made of information contained in the page tables. Since this is a time- 
consuming process, some preliminary work is done by the Savelnit function 120 
10 to help with the translation. The system information saved in the target state 

image is kept in a target state data structure, referred to in this implementation as 
the CSS structure 400. The Pentium control register CR3 holds the physical 
address of the page directory, and is saved in the CSS. Every translation of 
address will involve walking through the page directory, and it contains physical 
15 addresses of page tables. Since using physical addresses requires another 

translation, the page directory is scanned and copied to Page_Xdir array 140, 
filled with translated linear addresses. This way, any time a physical address is 
needed, a page table can be found by its linear address from the translated page 
directory. The FixPageTable function 130 walks through the page directory and 
20 translates all used entries, stuffing them into Page Xdir array 140. The linear 
address of the page directory itself is saved in a variable PageDirAddr 145. 

To save time during the restoration procedure and save space in storing 
the target state image, the image saving routine saves only pages of memory that 
are present in physical memory, not full of zeroes, and actually used (i.e., page 
25 frames). Again, the starting addresses of these pages are found in the page 
tables, and these addresses are physical, but hnear addresses are needed to be 
able to get to the pages. So, an array of linear addresses is built and filled with 
starting addresses of every used page. Along with this list, the list of exclusions 
is built, and this hst is a part of the CSS structure. It contains physical address of 
30 the last page to be saved before the gap, and then the first page that is used again. 
The target state restoration procedure will walk through this list, picking up start 
and stop addresses. The lists are built by the FixPageList function 150, the array 
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of linear addresses is called the PageList array 152, and the array of start/stop 
addresses is called the BlockList array 154. 

If a problem is encountered during creating the list of translated 
addresses, for example, memory is too fragmented and the list can not fit into the 
5 CSS, the BreakFlag variable 156 is set to 1. As soon as Savelnit retums, this 
flag is checked. If it is set, control retums directly to the image process 99 
without going through actual saving of the target state image. After Savelnit 
retums, control is given to the SetupFsBase function 160. This function 
calculates the 0-based linear address of the start of the image saving routine's 

10 code/data segment. This way, for any calculations that will require identity 

mapped address (same with and without paging, so that the linear address equals 
the physical address), the offset within the code or data segment is added to this 
base. The function takes the value of the code segment register and walks 
through the GDT (global descriptor table), and possibly the LDT (local 

15 descriptor table), to find the descriptor for the code segment, which descriptor 
contains the segment base. 

If the hard disk is used as the image storage medium, a file for storing the 
image is located on the disk by the FileFound function 1 70. It uses low-level 
IDE disk access to read/write, without using interrupts. This code knows how to 

20 interpret the partition table, locate FAT16 partitions and find the first cluster of a 
file called FLASHIMG.DAT in which the target state image will be stored. The 
ClusterToLBA function 172 calculates the LBA (linear block address) of the 
first cluster of the file FLASHIMG.DAT, so that the saving functions will know 
where on the disk to write data. 

25 If a flash ROM is used as the image storage medium, then the page 

directory has to be patched to make addresses used by flash accessible by the 
CPU. First, the physical address of flash is acquired from the PCI configuration 
data, and this address is used in the page directory fields. The linear address 
available is found by scanning page directory for two consecutive blank entries, 

30 to allow 8 MB of flash space. These two entries are patched with the addresses 
of two page tables, that we create in our own data segment. The starting address 
of the page tables is aligned on the 4K boundary, and the resulting linear address 
is converted to the 0-based linear address by adding the FS base to it, and then 

12 



wo 01/50248 



PCTAJSOO/35531 



finally it is converted to the physical address that can be stuffed into the page 
directory. Then all the entries in the page tables are filled with physical 
addresses of flash ROM, and the flash ROM is erased. 

Now control is passed to the Write function 180 that will actually save all 
5 the system information into the flash ROM or hard disk. The following Pentium 
registers are saved in the CSS: flags, CS:EIP, SS:ESP, CRO, CR2, CR3, CR4, 
TR, GDTR, LDTR and IDTR. The interrupt masks are read fi-om the PIC 
(programmable interrupt controller) and saved in the CSS. The ident command is 
sent to the hard drive, and the setting for the multiple sector transfers and 

10 currently set geometry is extracted from the ident data and saved in the local 
variables. There is no need to save this data in the CSS structure, since it will 
not be used by restore process. When restore routine jumps back to the QNX 
code, this code can easily locate its local variables. The address of the CSS 
structure is converted into 0-based linear and then physical, and saved inside of 

1 5 CSS. This way the restore routine 200 can actually write data into the CSS so 
that the final restore phases can use this data. The cache is invalidated and 
flushed to ensure memory coherency, and the CSS is written to the image storage 
medium. Now the saving procedure goes into a cycle, where all addresses fi*om 
0 to the top of RAM are converted into linear addresses and saved to the image 

20 storage medium. However, some pages are not saved. The addresses that 

marked in the BlockList as not present are not saved, and addresses fi*om AOOOO 
to 100000 are not saved, since they do not contain RAM, but rather system BIOS 
and ROM extensions. The conversion from physical addresses to linear 
addresses is done by simply indexing into the PageList array. All saves are done 

25 in chunks of 4K, the size of a page. 

When the save process is complete, a jump is made to the operating 
system return routine, designated as the OS_RET routine 300. This is the same 
code as the restore process will jump to after restoring the target state image. 
From this point the code does not really know whether the target state image was 

30 just saved or restored. The offset of OS_RET is saved in the CSS from the 
CSiEIP register value, and the restoring code will pick it up and jump there. 
OS_RET completes the target state restoration procedure, and in case of a save, 
it just reloads the values of the registers that are already loaded. One important 
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issue here is to invalidate and flush cache and translation lookaside buffers 
(TLBs), used as cache in the paging mechanism of the Pentium, since the restore 
code has just switched on paging, and the TLBs in the CPU are invalid. First, 
segment registers are restored along with stack pointer. Then IDTR, TR, CR2 
5 and CR4 restored. The target state restoration procedure requires some patching 
of the page tables, and by that time these patches are no longer needed, so the 
page tables are restored from the values saved in the CSS. Then hard drive 
geometry settings are set according to the values saved in the local variables. 
The saving and restoring process did not use IDE interrupts and they were 

10 disabled on the controller, so at this moment they are re-enabled again. Then 
PIC is initialized in the same way as QNX does it during its boot. Finally, the 
masks of the PIC and CPU flags are restored, enabling interrupts to happen. 

OS RET now returns to the caller of the image saving routine, which 
pops all general usage registers from stack and returns from the NMI originally 

15 initiated for the image saving procedure. Now execution is back at the target 
state process 99 code, the timer is reinitialized with the values acquired during 
save, and the file system is remounted. Finally, the programs that were loaded 
into memory in a held state are allowed to run to reinitialize mouse driver, 
synchronize system timer with hardware clock and restore the windows GUI. If 

20 a user application was specified in the command line, it is allowed to start only 
after windows GUI is completely loaded. If the image saving routine reports to 
the target state process that more data was saved than the image storage medium 
allows, then the processes loaded into memory are not continued, but killed 
instead and the error message is displayed. 

25 The target state restoration procedure starts with the BIOS giving control 

to the restore routine, located in the BIOS address space. Since the restore 
routine code will need to use RAM for data buffers and local variables, it 
relocates itself into the middle of physical RAM, since QNX is known not to use 
this memory. The code is thus relocated, and the new GDT is set up. It is then 

30 loaded into the GDTR, and since this moment the code does not rely on anything 
else but its own settings. The restore code reserves space for the buffers and 
stack; the DS, ES and SS are normally code32 based, but will change to 0-based 
selectors quite often. If hard disk is used as the image storage medium, the data 
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file is located by using the same function as was used during the image saving 
procedure to find the file's first cluster and convert this value into an LBA. Then 
the CSS is read into a local buffer, since it is occupies the first 4K of the file data 
and contains vital information on how to allocate the rest of data. Then the 
5 pages are read one at a time, and the pointer is compared to the start/stop list 
stored in the CSS. When the stop address encountered, the memory is filled with 
0 until the next start address, and the process of reading data from file is 
resumed. Special caution is taken when addresses are close to the execution 
address of the restore code by advancing the memory address to skip over the 

10 restore code and prevent overwrite. If flash ROM is used, then its address is 

fetched from the PCI configuration. Page tables are not used at this time, so the 
linear address is the same as the physical address. The flash ROM is not read in 
4K pages, but rather in chunks depending on the start/stop addresses. Again, the 
addresses between stop and start are filled with 0, and the memory region around 

15 the restore code is preserved. 

The jump into the operating system return code is a far jump instruction, 
at the end of the restore routine's code. The target CS:EIP values in the jump 
instruction opcode are loaded with values found in the CSS. Since QNX is using 
paging, and the restore code does not, the instruction that enables paging in CRO 

20 and the following jump instruction must be located in an identity mapped page. 
For this purpose the page directory is patched to track the restore code's base 
address in such a way that its linear address will be the same as its physical 
address. The original value from the page directory is saved in the CSS. Note 
that this CSS is the restore code's local copy of CSS and not the one that is 

25 located in the QNX code's data space. The critical values like this one will be 
copied there later. The address of the CSS structure is fetched from the local 
copy and loaded into register EBX. At that moment the total number of bytes 
restored is loaded into the CSS, as well as the address of patched page directory 
entry and its original value. Jumping into the QNX code is performed in two 

30 steps. First, the paging is switched on, then target LDT and GDT are loaded into 
the CPU registers, and then the far jump is taken into the QNX code. From 
there, the execution continues at the address of OS RET which is the same 
execution point as at the end of the image saving procedure. 

15 
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Although the invention has been described in conjunction with the 
foregoing specific embodiment, many aUematives, variations, and modifications 
will be apparent to those of ordinary skill in the art. Such alternatives, 
variations, and modifications are intended to fall within the scope of the 
5 following appended claims. 
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What is claimed is: 

1. A microprocessor-based system configured as an external programmer 
for a cardiac rhythm management device, comprising: 

5 a nonvolatile memory for containing executable startup code; 

a volatile system memory for containing executable operating system and 
application code; 

a nonvolatile image storage medium; 

a restore routine contained within the nonvolatile memory for 
1 0 transitioning the system from a non-operational state to a target state by restoring 
the contents of volatile memory and processor registers to a target state in 
accordance with a target state image contained in the image storage medium; 

an operating system return routine for returning control of the system to 
the operating system software. 

15 

2. The system of claim 1 wherein the target state image comprises a 
compressed copy of the contents of nonvolatile memory in the target state. 

3. The system of claim 1 wherein the image storage medium is flash ROM 
20 memory. 

4. The system of claim 1 further comprising: 

code in the restore routine for retrieving a memory image and a target 
state data structure from the image storage medium, wherein the memory image 
25 corresponds to pages in linear address space that are mapped into page frames of 
physical address space by a paging mechanism in the target state, and further 
wherein the target state data structure contains values of processor registers in 
the target state; and, 

code in the restore routine for loading processor registers with the values 
30 contained in the target state data structure and for storing the memory image in 
volatile memory in a manner that restores the page frames of the target state. 



17 



wo 01/50248 



PCT/USOO/35531 



5. The system of claim 1 wherein the target state image contained in the 
image storage medium includes contents of video memory. 

6. The system of claim 1 wherein further comprising startup code in the 

5 nonvolatile memory that initializes hardware registers with preset values prior to 
execution of the restore routine. 

7. The system of claim 1 wherein the microprocessor is a 16-bit or greater 
microprocessor and further wherein the system is capable of transitioning from a 

10 non-operational state to a target state in less than twenty seconds. 

8. A system for restoring a microprocessor-based system to a target state 
booted with operating system software, comprising: 

a restore routine for restoring volatile memory and processor registers to 
1 5 correspond to the target state; 

code in the restore routine for retrieving a memory image and a target 
state data structure from an image storage medium, wherein the memory image 
corresponds to pages in linear address space that are mapped into page frames of 
physical address space by a paging mechanism in the target state, and further 
20 wherein the target state data structure contains values of processor registers in 
the target state; 

code in the restore routine for loading processor registers with the values 
contained in the target state data structure and for storing the memory image in 
volatile memory in a manner that restores the page frames of the target state; 
25 and, 

an operating system return routine for returning control of the system to 
the operating system software. 

9. The system of claim 8 wherein the restore routine is contained in a 
30 nonvolatile memory. 

10. The system of claim 8 wherein the operating system return routine is 
contained in the page frames of the target state. 
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11. The system of claiir 10 wherein the operating system return routine is 
within an interrupt servicing routine of the operating system software. 

12. The system of claim 8 further comprising a target state process for 

5 moving the system to the target state before execution of the target state image 
saving routine. 

13. The system of claim 8 wherein the image storage medium is selected 
from a group consisting of a flash ROM, a hard disk, a floppy disk, and an 

0 optical storage medium. 

14. The system of claim 8 further comprising a target state image saving 
routine for creating an image of the target state and storing the image as a target 
state data structure and a memory image in the image storage medium. 

15. The system of claim 14 wherein a disk file system is unmounted by the 
target state image saving routine and remounted by the operating system return 
routine. 

16. The system of claim 8 wherein the retrieval and storing of the memory 
image by the restore routine is performed using physical addresses with paging 
switched off, and further wherein the restore routine switches on paging before 
transfer to the operating system return routine. 

17. The system of claim 8 wherein the restore routine relocates itself during 
execution to memory locations in volatile memory that unused in the target state. 

18. The system of claim 14 wherein the target state image saving routine 
scans the presently used paging directory and paging tables and generates a copy 
of the page directory filled with linear addresses of paging tables to enable 
translation of linear addresses to physical addresses. 
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19. The system of claim 1 8 wherein the target state image saving routine 
further generates a list of physical addresses of page frames stored in volatile 
memory locations from the contents of page tables. 

5 20. The system of claim 19 wherein the target state image saving routine 
further generates a list of linear addresses of pages that are mapped to page 
frames in memory in the target state to enable translation of physical addresses 
to linear addresses by indexing into the list with a physical address. 

10 21. The system of claim 20 wherein the target state image saving routine uses 
the list of linear addresses of mapped pages and the list of physical addresses of 
page frames to store the memory image in the image storage medium. 

22. The system of claim 8 wherein the target state data structure includes a 
15 list of physical addresses that corresponds to volatile memoiy locations in which 
page frames are stored in the target state, the list being employed by the restore 
routine in storing the memory image retrieved from the storage device into 
volatile memory at selected locations. 

20 23. The system of claim 8 wherein the restore routine retrieves the target 
state data structure from a known location in the image storage medium. 

24. The system of claim 8 wherein the target state data structure contains the 
physical address corresponding to the memory location of the target state data 

25 structure in the target state, enabling the restore routine to write to the target state 
data structure, 

25. The system of claim 8 wherein the target state data structure contains the 
physical address of the page directory in the target state, and further comprising 

30 code in the restore routine for: (a) patching the page directory so that physical 
addresses of restore routine instructions are mapped to the same physical 
addresses, (b) saving information for unpatching the page directory in the target 
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State data structure, and (c) enabling paging before jumping to the operating 
system return routine. 

26. The system of claim 25 further comprising code in the operating system 
5 return routine for invalidating translation lookaside buffers of the paging 

mechanism, and unpatching the page directory with information contained in the 
target state data structure. 

27. The system of claim 8 further comprising code in the operating system 
10 return routine for re-enabling interrupts and retuming from the interrupt 

servicing routine. 

28. The system of claim 14 wherein the storage device is flash ROM and 
further comprising code in the target state image saving routine for: (a) obtaining 

15 a physical address of the image storage medium from a hardware configuration 
file, (b) patching a blank entry of the page directory with the physical address of 
a page table created to contain the physical addresses of the image storage 
medium, (c) accessing the storage device with a linear address corresponding to 
the patched entry in the page directory and the page table pointed to thereby, and 

20 (d) storing the memory image and target state data structure in the image storage 
medium. 

29. The system of claim 14 wherein the image storage medium is a hard disk 
and further comprising code in the target state image saving routine for: (a) 

25 accessing the hard disk without interrupts, (b) interpreting a partition table of the 
hard disk to find a designated storage file and calculate a hnear block address 
thereof, and (c) storing the target state data structure and memory image in the 
designated storage file. 

30 30. The system of claim 14 wherein the target state image saving routine 
performs data compression on the page frames before storing the frames as the 
memory image in the image storage medium. 
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31. A method for starting a microprocessor-based system, comprising: 
executing a restore routine located in a nonvolatile memory, wherein the 

steps performed by the restore routine include: (a) retrieving a memory image 
created by a target state image saving routine from an image storage medium, the 
5 memory image corresponding to pages in linear address space that are mapped to 
page frames in physical address space by a paging mechanism in a target state of 
the system after booting of operating system software, (b) storing the retrieved 
memory image in volatile memory in a manner that restores the page frames in 
accordance with information derived from paging tables, and (c) retrieving a 
10 target state data structure from the image storage medium, the data structure 
containing values of processor registers that correspond to the target state, and 
restoring the processor registers to the retrieved values; and, 

transferring processor execution to an operating system return routine in 
volatile memory. 

15 

32. The method of claim 31 wherein the operating system retum routine is 
within an interrupt servicing routine of the operating system software. 

33. The method of claim 3 1 wherein the target state includes one or more 
20 user processes held in a suspended state by the operating system software. 

34. The method of claim 31 wherein execution of the target state image 
saving routine transfers processor execution to the operating system retum 
routine after storing the memory image and the target state data structure in the 

25 image storage medium. 

35. The method of claim 31 further comprising moving the system to the 
target state with a target state process before execution of the target state image 
saving routine. 

30 

36. The method of claim 31 wherein the image storage medium is selected 
from a group consisting of a flash ROM, a hard disk, a floppy disk, and an 
optical storage medium. 
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37. The method of clairi 31 wherein the system includes a hard disk drive 
and further wherein the dish file system is unmounted in the target state, the 
method further comprising mounting the file system after transfer to the 
operating system return routine. 

5 

38. The method of claim 31 wherein the retrieval and storing of the memory 
image by the restore routine is performed using physical addresses with paging 
switched off, and further comprising switching on paging by the restore routine 
before transfer to the operating system return location. 

10 

39. The method of claim 31 wherein the restore routine further performs the 
step of relocating itself during execution to memory locations in volatile memory 
that unused in the target state. 

1 5 40. The method of claim 3 1 wherein the target state image saving routine 

scans the presently used paging directory and paging tables and generates a copy 
of the page directory filled with linear addresses of paging tables to enable 
translation of linear addresses to physical addresses. 

20 41 . The method of claim 40 wherein the target state image saving routine 
further generates a list of physical addresses of used volatile memory locations, 
the list containing physical addresses of memory locations in which page frames 
are stored in the target state as reflected by the contents of the page tables. 

25 42. The method of claim 41 wherein the target state image saving routine 
further generates a list of linear addresses of pages that are mapped to page 
frames stored in memory in the target state to enable translation of physical 
addresses to linear addresses by indexing into the list with a physical address. 

30 43. The method of claim 42 wherein the target state image saving routine 

uses the list of linear addresses of pages and the list of physical addresses of used 
memory locations in order to access pages that are stored in memory in the target 
state and store the pages in the image storage medium. 
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44. The method of claim 3 1 wherein the target state data structure includes a 
list of physical addresses that corresponds to volatile memory locations in which 
page frames are stored in the target state, the list being employed by the restore 
routine in storing the memory image retrieved from the storage device into 

5 volatile memory at selected locations. 

45. The method of claim 44 further comprising retrieving the target state data 
structure from a known location in the image storage medium during execution 
of the restore routine. 

10 

46. The method of claim 45 wherein the target state data structure contains 
the physical address corresponding to the memory location of the target state 
data structure in the target state, enabling the restore routine to write to the target 
state data structure. 

15 

47. The method of claim 45 wherein the target state data structure contains 
the physical address of the page directory in the target state, and wherein 
execution of the restore routine further comprises: 

patching the page directory so that physical addresses of restore routine 
20 instructions are mapped to the same physical addresses; 

saving information for unpatching the page directory in the target state 
data structure; and, 

enabling paging before jumping to the operating system return routine. 

25 48. The method of claim 47 further comprising after transfer to the operating 
system return routine: 

invalidating translation lookaside buffers of the paging mechanism; 
unpatching the page directory with information contained in the target 
state data structure. 

30 

49. The method of claim 32 further comprising after transfer to the operating 
system return routine: 

re-enabling interrupts and retuming from the interrupt servicing routine; 
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initializing peripheral hardware devices; and, 

allowing processes held in a suspended state by the operating system to 
begin running. 

5 50. A processor-readable storage medium containing code for performing the 
method recited in claim 3 1 . 
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